Rules for Group Organizers

Effective as of November 6, 2026

These rules apply to an adult who creates a group in KiddoPay that is not their own family: a school class, a sports team, a club, a tutor's students, a camp unit or another group of children (the "group"; the adult is the "organizer"). The rules supplement the Terms of Use (https://kiddopay.ru/terms). For groups, these rules take precedence over the Terms where the two differ, including sections 2.1, 3.2 and 4 of the Terms. The organizer accepts the rules before creating their first group and accepts a new edition when creating the next group.

1. Who can be an organizer

1.1. Only an adult with full legal capacity can be an organizer.

1.2. If the organizer runs the group on behalf of an organization (a school, a sports school, a club, a camp), they confirm that they are authorized to do so. In that case both the organizer and the organization are responsible to the parents. The organizer also follows the organization's own rules on personal data.

1.3. The organizer may use the Service in their teaching, coaching or tutoring work, including paid work. This is not commercial use under section 4 of the Terms. The organizer may not take payments from children or parents through the Service, sell access to the Service or place advertising in it.

2. Roles in processing personal data

2.1. The personal data operator of the Service is Асиненко Александр Александрович; г. Балашиха, обл. Московская; Roskomnadzor register: 77-26-576300 (order № 617 dated October 21, 2026) (the "Operator"). The Operator stores and processes the data of the group's children in the Service under the Privacy Policy (https://kiddopay.ru/privacy). The data is stored in the Russian Federation.

2.2. The organizer decides which children to add to the group and which tasks, rewards and contests to run. The organizer obtains the consent of the parents (legal guardians) to the Operator processing the child's data in the Service (section 3). The organizer is not the legal guardian of the group's children.

2.3. For data about the children kept outside the Service (registers, lists, messages with parents), the organizer is responsible under the applicable data protection law.

3. Parents' consent

3.1. Before adding a child to the group, the organizer obtains the consent of one of the child's parents (legal guardians). The consent covers the child's participation in the group in KiddoPay and the processing of the child's personal data. It is given as a separate document, not combined with other documents (Art. 9(1) of Russian Federal Law No. 152-FZ "On Personal Data"). The consent may be given on paper or electronically, for example as a file or a message containing the consent text. A recommended form is given in the Annex.

3.2. If the child is 14 or older, the child signs the consent together with the parent (legal guardian).

3.3. When adding the child, the organizer confirms in the Service that the consent has been obtained. This confirmation is the organizer's statement to the Operator that they hold the consent.

3.4. The organizer keeps the consent for as long as the child is in the group and for 3 years after the child's profile is deleted. At the Operator's request, the organizer provides the consent within 5 business days. If it is not provided, the Operator may delete the child's profile.

3.5. If a parent withdraws the consent, the organizer deletes the child's profile from the group the same day. A parent may also write to the Operator at kiddopay@odinai.pro, and the Operator deletes the profile. After the profile is deleted, the child's data is destroyed within the periods set out in the Privacy Policy.

3.6. If a parent wants to know what data about the child is processed, or to correct or delete it, the organizer helps them. The organizer may also forward the request to the Operator within 3 business days. The parent may also contact the Operator directly.

4. What data may be entered

4.1. Only the child's name or a nickname and, optionally, a label (for example, "forward") may be entered. A first name and the initial of the last name are enough. Birth dates, photos, phone numbers, addresses, and information about health, ethnicity, religion, family, grades or behavior may not be entered. The Service does not allow a profile photo or a birth date for children in a group.

4.2. The organizer sets tasks with photo proof only when a photo is really needed. Photos must not show the faces of children or other people, documents or the inside of a home. Proof photos are deleted automatically after 90 days.

4.3. Task titles, comments and rewards do not include information about children beyond what the activity needs.

5. Who sees the data in the group

5.1. Adults of the group see the profiles of all children, their tasks, rewards, credits and transaction history.

5.2. A child sees their own data. A child also sees the names of other group members and their results in the contests the child takes part in. The organizer takes this into account and does not use leaderboards to shame children or compare them to their detriment.

5.3. Only the organizer's assistants (another teacher, coach or counselor) are invited as adults of the group. Parents of the children are not invited as adults of the group, because they would see other children's data. A parent learns about their own child from the organizer or the Operator.

5.4. Push notifications about group events contain no names or texts of members. Details are visible only inside the Service.

6. Group content

6.1. Tasks, rewards, names and comments must be suitable for children. Advertising, collecting children's contact details, offers to meet outside the activities, private correspondence with a child on topics unrelated to the activities, insults, pressure and any content prohibited by the Terms are not allowed.

6.2. The organizer hands out rewards from the group shop and is responsible for doing so. Coins and points in KiddoPay are not money and cannot be exchanged for money.

7. Oversight

7.1. Children and adults of the group can report the organizer, a task or a reward. The Operator reviews reports. It may remove content, request the parents' consents (section 3.4), block the organizer's account and delete the group together with the children's profiles.

7.2. The Operator may limit the number of groups and the number of children and adults in a group.

7.3. If the organizer deletes the group or their account and the group has no other adults, the group is deleted together with the children's profiles. The organizer informs the parents in advance if this affects the activities.

8. Responsibility

8.1. The organizer is responsible for complying with these rules and the law in their dealings with the parents and children of the group. This includes holding the consents (section 3) and the content of the group (section 6).

8.2. The Operator is responsible for processing and protecting data in the Service under the Privacy Policy and the Personal Data Security Policy.

9. Changes to the rules

The Operator may change these rules. The organizer accepts the new edition when creating the next group. The current edition is published at https://kiddopay.ru/organizer-terms. Questions: kiddopay@odinai.pro.

Annex. Consent form for a parent (legal guardian)

The organizer copies this text, fills in the fields in angle brackets and has a parent sign it. Permission to participate in activities is obtained separately. The organizer verifies the guardian’s authority and keeps the full edition, date and evidence identifying the person who consented. Where written consent is required by law, the statutory requirements, including an electronic signature for an electronic document, apply; a simple reply does not replace that form. Do not combine the consent with other documents such as an application, a contract or club rules.

Consent to the processing of a child's personal data in KiddoPay

I, ⟨full name of the parent (legal guardian)⟩, am the legal guardian of ⟨child's name⟩. Acting freely, of my own will and in the child's interests, I consent to the processing of the child’s personal data for participation in the group "⟨group name⟩" in the KiddoPay service (https://kiddopay.ru), run by ⟨organizer's name, organization⟩. I also consent to the processing of the child's personal data under Article 9 of Russian Federal Law No. 152-FZ "On Personal Data" of 27 July 2006.

Operator: Асиненко Александр Александрович; г. Балашиха, обл. Московская; Roskomnadzor register: 77-26-576300 (order № 617 dated October 21, 2026), email kiddopay@odinai.pro. The organizer enters the data into the group.

Purpose: the child's participation in the group. This means doing tasks, receiving virtual coins and points, group rewards, contests and transaction history.

Data: the child's name or nickname; a label in the group, if the organizer sets one; a hash of the sign-in PIN; tasks, completion marks, comments, credits, purchases and transaction history in the group; task proof photos, if the child uploads any (kept for 90 days); technical data of the child's device needed to sign in. The birth date, contact details and a profile photo are not processed.

Who sees it: the organizer and their assistants in the group. Other children of the group see the child's name and results in shared contests.

Actions: collection, recording, organization, accumulation, storage in databases in the Russian Federation, updating, retrieval, use, making available to group members to the extent above, blocking, deletion and destruction. Processing is automated. No cross-border transfer takes place.

Term: until the child's profile is deleted from the group or the consent is withdrawn. After that, the data is destroyed within the periods set out in the KiddoPay Privacy Policy (https://kiddopay.ru/privacy).

Withdrawal: I can withdraw the consent by telling the organizer or by writing to kiddopay@odinai.pro. After withdrawal, the child's profile is deleted.

⟨Date⟩ · ⟨Signature of the parent (legal guardian)⟩ · ⟨Signature of the child, if 14 or older⟩

Rules for Group Organizers · KiddoPay